Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/0101dcbc-3939-341d-9470-199975ad3a3f.roa
File:                     0101dcbc-3939-341d-9470-199975ad3a3f.roa (raw, json)
Hash identifier:          aTwX1IDVQEWvteeOee8fr9Zu2qxIJqjk+DSkNGLKwR8=
Subject key identifier:   FC:DD:15:14:39:05:1D:6E:A4:FA:B1:6B:01:FD:39:37:8B:EA:9C:B1
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584AD0D669F3022AA8ABCBAE6700
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/0101dcbc-3939-341d-9470-199975ad3a3f.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     213774
IP address blocks:        2602:f921:e00::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:69:f3:02:2a:a8:ab:cb:ae:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=1795147a-6900-4419-8bb4-792916075225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:a1:1f:7e:a2:99:2b:d8:14:46:2f:09:2a:
                    cf:99:52:f6:2f:ad:e8:fc:22:a5:72:72:88:02:40:
                    0f:2b:f5:1c:39:7d:13:bc:9c:af:83:02:82:0e:aa:
                    08:af:1a:bd:26:1e:05:d3:97:d0:14:76:a7:d0:b4:
                    ce:5a:84:02:0f:58:6d:fa:95:e6:5b:69:a0:17:40:
                    43:d9:34:5a:43:5d:ca:01:3c:ee:4e:2d:7d:46:cc:
                    1e:ee:4e:32:44:66:e2:7a:35:29:76:6d:a6:64:bc:
                    9b:c8:85:99:8b:fc:36:a0:94:33:61:4b:02:b6:cc:
                    61:d6:c3:2f:f0:27:74:90:d3:b6:f5:51:0a:bf:b1:
                    03:18:41:9c:b9:85:8f:d1:a3:29:82:32:60:64:70:
                    3e:f2:e4:6c:6f:f9:72:3f:c0:de:c7:4c:f8:ab:91:
                    85:05:8a:b0:42:84:36:91:59:3a:7c:a4:c1:c0:4f:
                    50:3e:11:5b:24:9a:65:6d:df:9b:f1:d5:d7:e8:e5:
                    40:ab:33:f5:2f:ee:47:45:4e:ed:b0:50:6d:f1:27:
                    32:8a:db:e8:3f:d6:81:3b:0e:2c:13:0e:d6:b0:2f:
                    9a:01:45:c6:ac:43:b7:87:93:ca:e1:ad:23:d4:9f:
                    fe:d5:39:a5:04:43:73:a5:82:c9:95:41:9d:b3:8c:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:15:14:39:05:1D:6E:A4:FA:B1:6B:01:FD:39:37:8B:EA:9C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/0101dcbc-3939-341d-9470-199975ad3a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921:e00::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:3b:ec:1f:0d:55:96:96:45:5c:34:16:e5:6f:97:ce:df:
         2b:28:6c:e6:ed:8c:2a:24:3a:7e:e6:80:12:5a:99:e7:47:fc:
         a3:7d:a1:32:16:3e:b4:84:90:18:ce:07:09:56:3a:b0:f6:f6:
         4f:ad:72:23:a9:3b:31:26:1c:c6:ab:0e:90:70:08:f9:56:3a:
         39:df:f7:5f:81:72:4d:11:3b:fd:11:28:02:da:d2:74:96:30:
         73:d8:cb:21:b1:40:59:53:c5:f8:b2:0b:fc:9a:b1:86:c6:74:
         4f:15:9d:66:28:7c:f5:94:1b:7c:38:36:e6:eb:50:92:78:2a:
         ac:84:51:ee:a6:ed:49:0c:c4:df:82:44:a1:98:d5:2e:f2:bd:
         7d:b1:2a:8f:75:4d:f2:f0:34:24:06:d1:26:aa:15:0d:7e:89:
         d6:1e:70:21:c9:88:ee:b3:26:42:fe:f7:4e:d5:d1:59:f7:d8:
         81:8f:e2:3b:46:6f:7d:cd:32:d9:1b:41:2e:ae:63:eb:49:9a:
         04:95:c5:00:cd:08:4d:1f:94:8b:07:85:3c:d9:9c:54:5a:7a:
         3d:ea:3b:ec:57:18:eb:c7:b0:6e:c6:1b:a0:9f:2f:38:33:8b:
         8e:e8:65:af:bf:26:7d:90:dd:9e:86:1a:1e:7d:89:73:a5:44:
         bd:b7:16:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1mnzAiqoq8uuZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBmMjE4MjctNmQ2NC00ODgwLTllNDYtYzNkMTMzMTNj
OTc1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk
MTc5NTE0N2EtNjkwMC00NDE5LThiYjQtNzkyOTE2MDc1MjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVGhH36imSvYFEYvCSrPmVL2L63o/CKlcnKI
AkAPK/UcOX0TvJyvgwKCDqoIrxq9Jh4F05fQFHan0LTOWoQCD1ht+pXmW2mgF0BD
2TRaQ13KATzuTi19Rswe7k4yRGbiejUpdm2mZLybyIWZi/w2oJQzYUsCtsxh1sMv
8Cd0kNO29VEKv7EDGEGcuYWP0aMpgjJgZHA+8uRsb/lyP8Dex0z4q5GFBYqwQoQ2
kVk6fKTBwE9QPhFbJJplbd+b8dXX6OVAqzP1L+5HRU7tsFBt8ScyitvoP9aBOw4s
Ew7WsC+aAUXGrEO3h5PK4a0j1J/+1TmlBENzpYLJlUGds4y5BwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPzdFRQ5BR1upPqxawH9OTeL6pyxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MGYy
MTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2QxMzMxM2M5NzUvMDEwMWRjYmMtMzkzOS0z
NDFkLTk0NzAtMTk5OTc1YWQzYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTBmMjE4MjctNmQ2NC00ODgwLTll
NDYtYzNkMTMzMTNjOTc1LzUwZjIxODI3LTZkNjQtNDg4MC05ZTQ2LWMzZDEzMzEz
Yzk3NS5jcmwwHwYDVR0jBBgwFoAU6x5xukiPrqQmrp9PrnGCEkf7LG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MGYyMTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2Qx
MzMxM2M5NzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL5IQ4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAzjO+wfDVWWlkVcNBblb5fO3ysobObtjCokOn7mgBJamedH/KN9
oTIWPrSEkBjOBwlWOrD29k+tciOpOzEmHMarDpBwCPlWOjnf91+Bck0RO/0RKALa
0nSWMHPYyyGxQFlTxfiyC/yasYbGdE8VnWYofPWUG3w4NubrUJJ4KqyEUe6m7UkM
xN+CRKGY1S7yvX2xKo91TfLwNCQG0SaqFQ1+idYecCHJiO6zJkL+907V0Vn32IGP
4jtGb33NMtkbQS6uY+tJmgSVxQDNCE0flIsHhTzZnFRaej3qO+xXGOvHsG7GG6Cf
Lzgzi47oZa+/Jn2Q3Z6GGh59iXOlRL23FkQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:37:26 2025 by rpki-client